Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 13:55:44.913 00:05:01.845 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 13:54:53.932 00:05:52.906 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 13:59:54.192 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 13:59:54.119 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 13:59:54.329 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 13:59:54.469 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 13:59:54.288 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 13:59:54.272 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 13:56:45.065 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 13:56:46.798 00:05:06.880 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 13:57:44.906 00:05:01.933 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 13:57:46.759 00:05:06.939 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 13:57:58.164 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2500 1 2025-10-19 13:58:44.022 00:05:02.736 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 13:58:45.046 00:05:01.734 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 13:59:53.955 00:05:52.806 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:04:54.402 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:04:54.401 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:04:54.480 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:04:54.609 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:04:54.599 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:04:54.362 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:00:53.933 00:05:52.906 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:01:44.927 00:05:01.833 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:02:45.068 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:02:46.800 00:05:06.879 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:03:18.171 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-19 14:03:44.908 00:05:01.933 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:03:46.760 00:05:06.940 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:04:44.027 00:05:02.737 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:04:45.050 00:05:01.734 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:09:54.764 00:00:00.027 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:09:54.559 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:09:54.519 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:09:54.524 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:09:54.443 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:09:54.553 00:00:00.028 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:05:53.958 00:05:52.806 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:07:44.929 00:05:01.834 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:06:53.937 00:05:52.907 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:08:45.071 00:05:01.692 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:08:38.179 00:05:10.015 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2456 1 2025-10-19 14:08:46.800 00:05:06.880 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:09:44.915 00:05:01.929 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:09:46.763 00:05:06.937 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:10:45.050 00:05:01.733 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:10:44.029 00:05:02.735 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:14:54.805 00:00:00.025 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:14:54.799 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:14:54.624 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:14:54.768 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:14:54.593 00:00:00.027 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:14:54.688 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:11:53.958 00:05:52.806 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:13:44.938 00:05:01.826 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:12:53.937 00:05:52.907 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:13:58.195 00:05:10.006 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2700 1 2025-10-19 14:14:45.071 00:05:01.693 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:14:46.804 00:05:06.876 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:15:44.918 00:05:01.927 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:15:46.763 00:05:06.937 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:19:55.443 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:19:55.518 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:19:55.391 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:19:55.314 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:19:55.235 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:19:55.234 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:16:45.052 00:05:01.732 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:16:44.032 00:05:02.734 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:17:53.960 00:05:52.806 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:19:18.200 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2592 1 2025-10-19 14:19:44.944 00:05:01.821 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:18:53.940 00:05:52.906 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:24:54.755 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:20:46.804 00:05:06.879 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:24:54.889 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:20:45.074 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:24:54.808 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:24:54.916 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:24:55.128 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:24:55.011 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:21:44.924 00:05:01.921 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:21:46.764 00:05:06.939 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:22:45.055 00:05:01.731 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:22:44.033 00:05:02.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:23:53.959 00:05:52.806 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:24:38.204 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2660 1 2025-10-19 14:25:44.944 00:05:01.821 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:29:54.840 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:29:54.780 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:24:53.938 00:05:52.907 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:29:54.928 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:29:54.920 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:29:54.991 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:29:55.101 00:00:00.020 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:26:45.078 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:26:46.805 00:05:06.881 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:27:44.925 00:05:01.921 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:27:46.765 00:05:06.942 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:28:44.034 00:05:02.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:28:45.060 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:29:58.209 00:05:10.002 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-19 14:29:53.962 00:05:52.805 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:34:55.181 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:34:55.266 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:34:55.214 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:34:55.144 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:34:54.971 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:34:55.064 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:30:53.942 00:05:52.905 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:31:44.948 00:05:01.819 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:32:45.079 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:32:46.806 00:05:06.882 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:33:44.928 00:05:01.920 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:33:46.766 00:05:06.942 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:34:45.062 00:05:01.727 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:34:44.036 00:05:02.733 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:35:18.211 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2456 1 2025-10-19 14:39:54.955 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:39:54.950 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:39:55.220 00:00:00.044 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:39:55.187 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:39:55.036 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:39:55.160 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:35:53.962 00:05:52.806 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:37:44.950 00:05:01.819 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:36:53.942 00:05:52.906 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:38:45.080 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:38:46.808 00:05:06.902 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:39:44.930 00:05:01.920 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:39:46.769 00:05:06.962 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:40:45.060 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:40:44.036 00:05:02.732 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:40:38.214 00:05:10.003 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-19 14:44:55.526 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:44:55.701 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:44:55.601 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:44:55.478 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:44:55.446 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:44:55.491 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:41:53.964 00:05:52.805 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:42:53.944 00:05:52.906 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:43:44.952 00:05:01.818 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:44:45.083 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:44:46.809 00:05:06.902 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:45:44.933 00:05:01.918 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:45:46.769 00:05:06.961 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:49:55.004 00:00:00.029 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:49:55.222 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:49:55.432 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:49:55.487 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:49:55.079 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:49:55.083 00:00:00.029 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:45:58.218 00:05:10.926 OSPF 27.0.10.2:0 -> 224.0.0.5:0 40 2792 1 2025-10-19 14:46:44.039 00:05:02.730 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:46:45.062 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:47:53.966 00:05:52.805 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-19 14:48:53.945 00:05:52.905 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-19 14:49:44.954 00:05:01.817 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-19 14:50:45.083 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-19 14:50:46.812 00:05:06.902 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-19 14:54:55.470 00:00:00.022 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:54:55.554 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:54:55.433 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:54:55.505 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-19 14:54:55.425 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:54:55.259 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-19 14:51:18.223 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2544 1 2025-10-19 14:51:44.933 00:05:01.917 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-19 14:51:46.771 00:05:06.963 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-19 14:52:45.063 00:05:01.728 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-19 14:52:44.043 00:05:02.729 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-19 14:53:53.966 00:05:52.805 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 Summary: total flows: 173, total bytes: 112384, total packets: 1695, avg bps: 230, avg pps: 0, avg bpp: 66 Time window: 2025-10-19 13:54:53 - 2025-10-19 14:59:46 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0031s User: 0.0021s Wall: 0.0036s flows/second: 48445.4 Runtime: 0.0036s